OS X Leopard upgrade: my observations
Posted by: tygerbox in Mac, Tech, tags: Firewall, OS X, ReviewI upgraded my Mac OS X from Tiger to Leopard yesterday. Overall I got nice things to say offset by one big honkin’ rant. Read on if this may concern you in the near future.
First off and most notably, it took a long time. I mean over an hour to just upgrade the OS – not counting installing all the development tools and running the software updater to get fresh patches. Probably two and a half hours door to door. I don’t remember the Tiger upgrade taking so long. However I do applaud that the installation disk verifies its own integrity before installing. You don’t want a bunk disk failing during upgrade thereby trashing your current installation. So after upgrading, restarting, installing more crap, restarting, installing patches, restarting and finally upgrading the firmware in my Airport Extreme/Express units, I was apparently good to go. So I did some looking around to make sure some of my crucial settings were still in place.
Cue the rant…
I had made some custom modifications to the firewall – opening up certain ports to accommodate certain things. So I went looking for that to make sure all was well. First I found that the firewall settings are no longer to be found where they were. I tracked them down under the “Security” pane in System Preferences. They re-did things a bit and here is what I saw:
So first off, the firewall is disabled by default. And that is so not OK. Next off, what do those other options actually mean? Especially the second and third options? Are they independent or do they work in tandem? I did some poking around and found an excellent discussion that shed a little light on the subject. First off, “Block all” does not actually do that. It sort of does. So, most importantly, hit the Advanced button and enable Stealth Mode. Then it actually functions like a proper firewall. You want this enabled for whatever mode you want to run the firewall in. But what if you want to open up ports for specific apps? Well, then that’s what the third option is for. When you run in this mode, if an app (a torrent client, doing point to point file transfers using a chat client, etc) attempts to start up on a port and accept connections, you will get a dialog box asking if this is OK. So one may allow or deny certain services through the firewall. Unfortunately, when you shut down the app in question, the firewall does not close the port. Moreover, it’s rumored that the OS digitally signs the apps that it opens up the ports for, so if they change – it all breaks. A for effort security-wise but D for execution.
Point one: what the fuck Apple? Leaving the firewall disabled by default? What gives with that? Point two: I get trying to streamline exposing pinholes in the firewall, but what reason is there to remove a power-user option to configure port exceptions manually? Not many people need to use it, but the ones that do need that. The feature existed in Tiger, so why remove it? Argh! So yeah, if you upgrade, tidy up that firewall. The link above give a more in-depth discussion of what’s going on under the hood. God bless the people that have the drive and the time to tinker and write it up for the rest of us.
So after I got done frothing and foaming about the firewall issue, I got down to tinkering around with all those nifty new features. Gotta say, pretty slick at points. Apple has a video that goes over much of it (worth watching if you upgrade) but some comments of mine:
The hacks to the finder – the new Cover Flow browsing mode coupled with Quick Look – are really nice. Plus the whole Stacks thing (another desktop/finder tweek) also looks really slick and could be potentially very useful for re-organizing the messy desktop. I just watched the video of those features and giggled and the sheer Apple-y-ness of the finder hacks. Spotlight is quite a bit faster now and it really speedy if you use it as an app launcher – so you Quicksilver users may not need that anymore. The iChat app has lots of multimedia eye candy jammed into it. Meh. Use Adium instead. Preview got a facelift and a bunch of nice (most PDF oriented) features added as well. The terminal no longer lets you set an image as a background. Boo to that. The Mail app got a slew of new cool features. I like the Notes and To Do features – the To Do notes also tie into the iCal app and that is slick. Notes take any sort of media you care to jam into them and can get all the sticky notes off of one’s desktop. The mail reading window has some neat additions – if there is something in the body of the email that looks like an address or email address or chat handle, it makes it easy to suck it right into the Address Book app. Nice job with that.
However, as a long time UNIX user, I’m mostly stoked about having real native virtual desktop support (Spaces) rather than having to rely on the other ones that have their problems. They even mapped the desktop movement hotkeys to Control-Arrow – just like we did it back in the day. Spaces is hands-down my favorite thing about the new upgrade. Furthermore, Spaces plus the Growl notification app is a win.
I’m not going to go on about all the new features since you can read about that anywhere. Overall, It looks like a worthwhile upgrade and it went painlessly. It just takes a while to accomplish it all, and the sins with the firewall left a bad taste in my mouth that has not gone away yet.
Cheers all.
Comments Off





Entries (RSS)